custom firewall solution

This commit is contained in:
2022-04-16 17:47:49 +02:00
parent 49102eb285
commit 75d7aad012
10 changed files with 50 additions and 50 deletions

View File

@ -26,40 +26,3 @@
- name: Enable ufw
community.general.ufw:
state: enabled
- name: Allow ssh via ufw from localnet
community.general.ufw:
rule: allow
direction: in
port: ssh
from_ip: "192.168.69.0/24"
interface: eth0
- name: Allow http via ufw from internet
community.general.ufw:
rule: allow
direction: in
port: http
interface: eth1
- name: Allow https via ufw from internet
community.general.ufw:
rule: allow
direction: in
port: https
interface: eth1
- name: Allow http via ufw from internet
community.general.ufw:
rule: allow
direction: in
port: http
interface: eth1
- name: Allow neko ports via ufw from internet
community.general.ufw:
rule: allow
direction: in
port: 59000:59049
proto: udp
interface: eth1